10.01.2013 Views

Walter “Wally” Bostelmann - CSI Memphis

Walter “Wally” Bostelmann - CSI Memphis

Walter “Wally” Bostelmann - CSI Memphis

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

On Target With the Better Business Bureau (BBB)<br />

BBB Small Business Advice on<br />

Dealing with a Data Breach<br />

The Identity Theft Resource Center lists<br />

more than 79 million records reported<br />

compromised in the United States in<br />

2007—almost a fourfold increase from<br />

the nearly 20 million records reported<br />

compromised in 2006. The cause of the<br />

data breaches ranged in sophistication<br />

from the expert work of computer<br />

hackers to the negligent handling of<br />

sensitive information on the part of<br />

company employees.<br />

So far 2008 looks a lot like 2007. There<br />

have already been major data breaches<br />

at some very recognizable companies<br />

such as MTV and T. Rowe Price.<br />

However, just because a business isn’t<br />

part of the Fortune 500 doesn’t mean it<br />

is safe from the risk of a security<br />

breach, and Better Business Bureau<br />

(BBB) wants small businesses to be<br />

prepared to handle a breach if the<br />

business’ or customers’ financial<br />

information is stolen.<br />

“While breaches at major corporations<br />

make the news, many small businesses<br />

also find themselves victims of security<br />

breaches,” said Nancy Crawford,<br />

Director of Marketing and<br />

Communications, BBB of the Mid-<br />

South. “Sensitive financial information<br />

on both a business and its customers<br />

can be compromised by poor handling<br />

of computer or paper data as well as<br />

stolen by thieves and hackers. Small<br />

business owners must be prepared to<br />

respond quickly to lessen the damage<br />

done.”<br />

Regardless of how a data breach occurs,<br />

responding quickly can help a business<br />

regain trust and retain its customer<br />

base. BBB offers the following steps<br />

and guidance for small business owners<br />

in the event they experience a security<br />

breach:<br />

Notify Customers<br />

Currently, 39 states have laws that<br />

require customer notification in the<br />

event personal data is lost, stolen, or<br />

inadvertently disclosed, and these laws<br />

may expand to a national level soon.<br />

Many states require companies to notify<br />

PAGE 12<br />

their customers of any data breach. Other<br />

states require notification when harm to<br />

potential victims is likely. Even if the law<br />

does not require it, businesses should<br />

strongly consider the advantages of giving<br />

notice to customers whose information was<br />

compromised.<br />

If a business chooses to inform customers<br />

about a security breach, it should:<br />

• Describe the nature of the incident;<br />

• Inform them what has been done to<br />

address the problem; and<br />

• Advise them on what the company will do<br />

in the future to further reduce the chance of<br />

future security breaches.<br />

Notify Law Enforcement and Other<br />

Authorities<br />

If a breach occurs, it is important that the<br />

business alert appropriate law enforcement<br />

officials immediately so they can<br />

investigate the incident. This could include<br />

local police, state authorities, or even the<br />

FBI. BBB recommends that companies<br />

check with their legal advisors for counsel<br />

now, so that in the event a breach does<br />

happen, the business is<br />

prepared to contact the<br />

appropriate local law<br />

enforcement agency<br />

quickly.<br />

BBB also recommends<br />

alerting the three national<br />

consumer reporting<br />

agencies: Equifax<br />

(www.equifax.com,<br />

TransUnion<br />

(www.transunion.com)<br />

and Experian<br />

(www.experian.com).<br />

Businesses should also<br />

alert the bank or company<br />

hired to process payment<br />

cards. It’s important that<br />

the compromised<br />

accounts are watched or<br />

closed to prevent fraud<br />

from occurring on them.<br />

Unfortunately, businesses<br />

could be liable for any<br />

resulting fraud, so quick<br />

notification to payment<br />

card companies can help.<br />

Customer Support<br />

If a breach occurs, BBB advises that<br />

businesses:<br />

• Encourage customers to monitor their<br />

credit reports for signs of identity theft.<br />

If a business can afford the expense, it<br />

should consider paying for a credit<br />

monitoring service for affected customers<br />

for a designated period of time<br />

(generally 6-12 months).<br />

• Recommend that any customer experiencing<br />

or suspecting identity theft alerts<br />

the business, files a police report, and<br />

notifies the three national consumer reporting<br />

agencies.<br />

For more BBB advice on ID theft prevention<br />

and for trustworthy advice on<br />

many other issues affecting small businesses,<br />

go to www.bbb.org.<br />

Nancy Crawford | Director of<br />

Marketing & Communications<br />

Tel: 901-757-8627<br />

Wade Lunday and<br />

Associates Inc.<br />

Manufacturers Representatives<br />

Division 7<br />

Firestone Building Products:<br />

Single-Ply - EPDM, TPO, and PVC<br />

Systems<br />

Asphalt - BUR systems, SBS and<br />

APP Modified Systems<br />

Tapered and Flat Insulation Systems<br />

also<br />

Georgia Pacific: Dens-Deck<br />

Gibsom-Homans: Cements and<br />

Coatings<br />

<strong>Memphis</strong> (901) 854-6746<br />

Little Rock (870) 942-1463<br />

Fax (870) 942-5810<br />

AUGUST ISSUE, 2008

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!